gif-search
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches search results and downloads media files from Google's official Tenor API endpoints (tenor.googleapis.com).
- [COMMAND_EXECUTION]: Utilizes shell commands including curl and jq to perform network requests, parse JSON data, and save files to the local system.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests external data from the Tenor API search results in SKILL.md.
- Boundary markers: No explicit boundary markers or instructions to ignore embedded content are present in the processing logic.
- Capability inventory: The skill uses curl to write binary GIF data to the file system based on API responses.
- Sanitization: The skill relies on the structure of the API response (parsed via jq) but does not perform additional sanitization on the URLs retrieved.
Audit Metadata